Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: LDQlHPD0rHf1Y+7nFjZXmMfwSfAiYbI/zc7yhVoYCw0=
Subject key identifier: 99:67:CA:6D:4A:54:2D:28:35:66:5D:70:0B:A8:4A:34:4B:60:45:FA
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019748F9F1B3B0E8E3AC368A4E10EDDFC1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0D33
Signing time: Sat 07 Jun 2025 06:00:29 +0000
Manifest this update: Sat 07 Jun 2025 06:00:29 +0000
Manifest next update: Sun 08 Jun 2025 06:00:29 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: f5/1eOcLNyEENj/Vt78rFTiONEEgiUJFVYfdpBVh6vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f1:b3:b0:e8:e3:ac:36:8a:4e:10:ed:df:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Jun 7 06:00:29 2025 GMT
Not After : Jun 8 06:00:29 2025 GMT
Subject: CN=9967ca6d4a542d2835665d700ba84a344b6045fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:a1:2a:30:c9:f7:06:3a:9c:26:c5:9d:24:
7f:76:46:ee:55:7c:8f:fd:58:cd:c2:7f:64:23:7f:
9c:66:2f:62:89:6e:a7:dd:9b:95:20:eb:23:b6:bb:
43:a6:89:a1:bc:b3:e2:57:2e:a8:98:0c:b4:93:73:
16:1e:ef:f2:80:d8:50:0d:d2:89:73:57:27:05:98:
ec:9f:f3:71:29:48:f8:90:a8:f1:9f:1a:a5:0c:60:
6c:a7:71:44:fd:fe:a8:00:88:75:82:3a:44:18:f4:
f2:3d:b6:3a:16:a7:bb:e7:50:06:d4:5b:e3:91:ed:
3c:0d:31:6c:b7:0a:15:24:2f:71:46:d5:d8:42:02:
93:fa:34:d8:0d:02:9a:4c:20:47:b3:43:5c:4e:cf:
59:dc:2a:9f:a8:dd:43:e7:6f:53:1e:75:d8:37:7d:
a1:b1:df:81:f4:36:47:d6:a8:d2:ff:d4:da:34:c1:
38:73:1d:16:8f:ad:34:88:bb:7e:18:e9:b7:9e:70:
74:1e:05:67:fd:9d:08:40:88:63:82:93:fe:c4:87:
11:e1:cd:a8:6a:b1:04:17:41:1e:4a:af:df:1e:88:
6a:16:58:04:b8:e5:9e:16:26:e8:b6:0d:9b:60:b3:
32:17:d2:2d:fc:38:ba:86:3a:e5:1f:60:e0:36:f8:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:CA:6D:4A:54:2D:28:35:66:5D:70:0B:A8:4A:34:4B:60:45:FA
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:02:d8:18:ea:b1:e2:7d:66:bf:4e:24:28:45:87:d3:2b:a1:
b7:01:95:6e:0f:05:37:72:21:dc:de:db:a0:1a:bf:9e:17:4b:
ce:de:eb:49:9b:a2:c3:58:25:a0:a0:c4:e0:f2:a1:69:31:af:
73:5b:f2:5b:c5:a2:b7:f2:ff:ae:10:73:a0:48:08:a0:6f:12:
33:5d:00:fd:5e:3b:46:4a:01:f0:f5:1d:c8:9e:30:86:7e:7b:
db:23:83:9d:fc:e1:f2:c2:81:96:c9:c9:2c:e4:60:b9:1a:05:
56:da:a7:a5:68:42:22:73:a2:7b:36:2b:25:4a:0f:f9:30:43:
a7:3a:37:cb:14:28:fd:72:b6:69:f2:5a:ec:f3:14:a3:69:74:
a0:64:70:07:87:9f:7c:c0:d8:cf:13:71:58:33:22:a9:e4:cf:
bd:a8:07:ff:e8:80:bf:e7:5a:07:51:ab:fe:3c:a2:23:b7:a3:
89:ba:81:a4:2d:62:44:3f:39:15:24:c0:35:fd:7b:bb:6f:7a:
d3:59:55:bd:18:8c:17:76:9f:c6:15:8f:45:57:78:00:6f:df:
64:e1:57:f9:6b:73:dd:f6:88:29:06:5b:ae:01:84:a4:9b:68:
ec:a9:d0:6f:9d:f9:ef:25:c7:ce:0a:a1:1c:00:17:a4:80:c7:
f8:af:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:14 2025 by rpki-client